CVE-2022-48064

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cve@mitre.org

Published

2023-08-22

Last modified

2024-10-03

Weaknesses

CWE-770

Affected products

• Fedora (Fedoraproject)
• Binutils (Gnu)
• Ontap Select Deploy Administration Utility (Netapp)

References

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3XKYUAIORNQ32IZUOZFURE…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJ…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSUNHSOWWLLNGHRM5TUBNC…
• https://security.netapp.com/advisory/ntap-20231006-0008/
• https://sourceware.org/bugzilla/show_bug.cgi?id=29922
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=8f2c64de86bc3d7556121fe296dd679000283931